More on preventing device installs

by Mitch Tulloch [Published on 15 Aug. 2006 / Last Updated on 15 Aug. 2006]

Another way you can configure Vista to prevent certain kinds of devices from being installed.

Another way Vista lets you prevent new devices from being installed is by specifying the PnP hardware ID of the device type you want to prohibit. To do this, edit local Group Policy as follows:

1. Type gpedit.msc in the Start Search box and hit Enter.

2. Click Continue when the UAC prompt appears.

3. Navigate to the following policy location:

Computer Configuration\Administrative Templates\System\Device Installation Restrictions

4. Enable the following policy setting:

Prevent installation of devices that match these device IDs

5. Click Show

6. Click Add

7. Specify the device ID of the type of device you want to prevent from being installed. For example, to prevent USB combined devices like a keyboard with integrated pointing device from being installed, specify the following device ID:

USB\COMPOSITE

Cheers,
Mitch Tulloch, MVP
http://www.mtit.com

Featured Links